Invalid user password  for secured services locks user out of Windows Account

Discussion created by dpokrajac on May 23, 2014
I Have an ArcGIS Server 10.2.2 with a user security store from Windows Active Directory. I created an ArcGIS JavaScript 3.9 application using IdentityManager to handle credentials for secured services. I have numerous secured feature layers in the application. After onewrong password attempt with a specified user name, it locks the user account out of not only ArcGIS Server rest services, but also the windows account, so the user can no longer access their computer.

Our normal Windows Active Directory lockout policy is after 3 consecutive wrong password attempts, but was hoping ArcGIS Server would not affect Windows Account access also. Is this a known bug?